Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ht0Js8HzeD_wUjwoAHjkX7bchYM.roa
File: Ht0Js8HzeD_wUjwoAHjkX7bchYM.roa (raw, json)
Hash identifier: c/znG4eMqfKGR2LazZv+CAKWeeg1CLdNzePh68CnYMc=
Subject key identifier: 1E:DD:09:B3:C1:F3:78:3F:F0:52:3C:28:00:78:E4:5F:B6:DC:85:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B6A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ht0Js8HzeD_wUjwoAHjkX7bchYM.roa
Signing time: Fri 13 Jun 2025 12:42:29 +0000
ROA not before: Fri 13 Jun 2025 12:42:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27498 (0x6b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 12:42:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1EDD09B3C1F3783FF0523C280078E45FB6DC8583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:df:e5:f6:ba:5d:11:64:12:5d:80:85:e6:
99:c0:87:f8:e6:bf:58:61:d8:a9:0e:92:b9:fc:ed:
38:e9:e8:89:3a:6c:39:77:50:5c:c9:ed:6f:ce:77:
6a:0e:c1:26:f6:64:61:7d:12:44:22:32:69:69:a4:
e2:7d:ce:f5:ec:ad:67:6a:d7:5a:0e:ac:b6:5d:1d:
7f:5c:8a:4d:8e:7a:6f:24:a1:66:b3:2b:f6:8d:a4:
a8:a4:90:1f:32:a6:d9:f6:30:66:3c:0e:53:74:43:
5f:dc:bd:88:a4:9d:78:03:69:0d:df:8a:87:8e:35:
2c:b1:51:dd:94:96:45:dd:e9:77:43:17:62:88:1a:
66:80:22:90:f2:b2:c0:ea:e1:58:e9:3d:0f:59:07:
45:e0:2b:84:87:de:3f:b6:66:f0:73:a4:91:9e:0a:
4e:b8:64:e9:42:45:41:29:b1:53:4d:ee:f2:53:e7:
92:89:4c:db:67:fe:09:e5:ff:cf:a3:69:e6:f6:f7:
1b:2c:12:88:e9:07:04:b1:8b:3d:a8:d2:f2:ff:4e:
e2:5d:74:a4:00:3a:e2:0f:77:ae:0f:72:cb:4a:95:
33:39:46:25:dc:fe:22:cf:a9:71:c4:76:d0:11:ce:
bd:82:6a:5c:cd:2d:f3:d6:c7:cf:87:30:88:e4:09:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:09:B3:C1:F3:78:3F:F0:52:3C:28:00:78:E4:5F:B6:DC:85:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ht0Js8HzeD_wUjwoAHjkX7bchYM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
11:95:86:cf:f6:7f:a1:80:35:7e:cb:c1:80:29:16:cd:bf:a6:
76:96:78:b5:12:37:9d:29:8f:44:34:4b:e9:5e:a5:ce:99:7d:
b1:dd:61:56:80:71:18:22:51:16:93:02:4a:78:66:9f:17:46:
16:d7:5d:f7:e3:02:e7:66:c4:04:68:02:89:9e:84:b3:ba:39:
8b:3a:9e:14:14:71:8c:a5:a6:ac:4c:f0:a7:fe:22:90:37:aa:
91:98:e7:69:9b:6a:9d:e3:b5:16:f4:7e:7d:16:95:2b:80:8c:
9b:b2:0c:d0:18:32:1f:e5:eb:3b:89:0e:1d:99:46:d4:47:2b:
47:cd:d3:6a:3a:00:f3:72:56:c0:8a:7c:15:80:a2:9d:7c:65:
5f:70:ab:7d:82:dc:2a:7a:46:0b:76:3e:2b:6a:56:7b:98:f7:
a3:61:ea:7f:5a:af:ba:84:67:de:b0:07:f9:53:88:a6:17:fb:
a5:5d:db:db:78:3a:89:c4:f3:22:58:e9:25:68:97:3f:aa:5a:
d7:7d:5b:55:d2:fa:e3:1d:5c:1f:1b:b7:25:e7:a7:90:3a:0a:
d8:48:c5:57:a4:c4:1e:8b:fe:90:5e:57:7b:19:b0:d0:4d:40:
14:a7:1e:17:bf:a8:06:b8:fb:3f:95:0c:ee:79:bd:2d:fb:6d:
8a:fc:d0:1b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICa2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTMx
MjQyMjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFFREQwOUIzQzFGMzc4
M0ZGMDUyM0MyODAwNzhFNDVGQjZEQzg1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO7t/l9rpdEWQSXYCF5pnAh/jmv1hh2KkOkrn87Tjp6Ik6bDl3
UFzJ7W/Od2oOwSb2ZGF9EkQiMmlppOJ9zvXsrWdq11oOrLZdHX9cik2Oem8koWaz
K/aNpKikkB8yptn2MGY8DlN0Q1/cvYiknXgDaQ3fioeONSyxUd2UlkXd6XdDF2KI
GmaAIpDyssDq4VjpPQ9ZB0XgK4SH3j+2ZvBzpJGeCk64ZOlCRUEpsVNN7vJT55KJ
TNtn/gnl/8+jaeb29xssEojpBwSxiz2o0vL/TuJddKQAOuIPd64PcstKlTM5RiXc
/iLPqXHEdtARzr2CalzNLfPWx8+HMIjkCWj3AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUHt0Js8HzeD/wUjwoAHjkX7bchYMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0h0MEpzOEh6ZURfd1Vq
d29BSGprWDdiY2hZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQARlYbP
9n+hgDV+y8GAKRbNv6Z2lni1EjedKY9ENEvpXqXOmX2x3WFWgHEYIlEWkwJKeGaf
F0YW11334wLnZsQEaAKJnoSzujmLOp4UFHGMpaasTPCn/iKQN6qRmOdpm2qd47UW
9H59FpUrgIybsgzQGDIf5es7iQ4dmUbURytHzdNqOgDzclbAinwVgKKdfGVfcKt9
gtwqekYLdj4ralZ7mPejYep/Wq+6hGfesAf5U4imF/ulXdvbeDqJxPMiWOklaJc/
qlrXfVtV0vrjHVwfG7cl56eQOgrYSMVXpMQei/6QXld7GbDQTUAUpx4Xv6gGuPs/
lQzueb0t+22K/NAb
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:11:57 2025 by rpki-client